|
Question : InterVlan routing using a Cisco 3750
|
|
I am trying to route communications between two vlans. Vlan10 is a DMZ and only accepts http traffic to the reverse proxy. VLAN4 is internal and only houses my webservers. Now I need to route data between the two VLANs to make the reverse proxy feature work. I know that VLANs as a standard do not route between each other without a router. My question is can the 3750 route the VLANs w/o a router and if so how? Also if this can be accomplished using the PIX that would be even better.
I have enabled ip routing and configured the VLANs with addresses. I can ping the VLANs from the switch but cannot ping VLAN10 from VLAN4 or VLAN4 from VLAN10 using the webservers. I used the sh ip route command and can see the routes.
This is what the environment looks like:
PIX 506E | CISCO 3750 | | VLAN10 VLAN4
|
Answer : InterVlan routing using a Cisco 3750
|
|
To enable the switch to do the routing: after enableing routing on the cisco 3750, set an ip address on each vlan interface of the switch, also set a default route on the switch to point to your pix 506E ip routing int vlan 10 ip addr x.x.x.x x.x.x.x (ip and subnet of vlan 10) int vlan 4 ip addr y.y.y.y y.y.y.y (ip and subnet of vlan 4) ip route 0.0.0.0 0.0.0.0 z.z.z.z (ip address of pix)
on the pix 506 add a route to the vlan that it does not reside on ip route x.x.x.x x.x.x.x y.y.y.y
also check to be sure you have a nat command and/or static commands to handle the new subnet
then change default gateways on equipment to point to the ip addresses on the 3750 switch. Switch will handle routing between the two subnets, and the pix will know how to communicate with both
using the pix 506e see this link: http://www.experts-exchange.com/Networking/Q_21818768.html?query=pix+vlan+506&clearTAFilter=true and http://www.experts-exchange.com/Networking/Q_21399915.html?query=pix+vlan+506&clearTAFilter=true
|
|
|